$ rpki-client -vvf repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft File: 668C2397879176FD00D1A4949BAF8C1D8E764166.mft (raw, json) Hash identifier: iXlaKO5+teotjTj/ShNAWqRD5QvbibpuXkh5eh7J7TY= Subject key identifier: D2:13:35:7B:D0:C5:50:D0:1D:59:DA:94:2F:ED:A3:AA:30:BF:AC:DA Authority key identifier: 66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 Certificate issuer: /CN=668C2397879176FD00D1A4949BAF8C1D8E764166 Certificate serial: 5AC00A377A09579EDD971FAD507A3CC798044EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft Manifest number: 17 Signing time: Sat 18 Apr 2026 08:01:14 +0000 Manifest this update: Sat 18 Apr 2026 07:56:14 +0000 Manifest next update: Tue 21 Apr 2026 12:56:14 +0000 Files and hashes: 1: 668C2397879176FD00D1A4949BAF8C1D8E764166.crl (hash: ReJdfxe4GfpIAQr5Wi7kRxiqQwWRwPo0B9gERhsv/lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.crl rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c0:0a:37:7a:09:57:9e:dd:97:1f:ad:50:7a:3c:c7:98:04:4e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668C2397879176FD00D1A4949BAF8C1D8E764166 Validity Not Before: Apr 18 07:56:14 2026 GMT Not After : Apr 21 12:56:14 2026 GMT Subject: CN=D213357BD0C550D01D59DA942FEDA3AA30BFACDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:9d:f6:e9:ea:8e:4e:42:8f:76:9e:20:e2: 5f:8b:0b:20:ce:f0:dd:9d:b3:5c:89:1f:5a:b7:92: 2e:cc:62:7a:73:40:22:c5:5f:97:ab:0c:54:c1:15: ea:85:13:75:b9:97:78:3b:b7:0a:7d:59:04:ac:20: 03:d1:11:0f:b4:38:a7:38:d3:9b:95:d3:57:38:07: 61:21:05:2e:37:a1:c7:08:9a:7f:11:74:78:d8:1a: d1:85:0c:65:b1:17:25:ad:1a:35:ef:03:f5:74:a7: 72:9b:52:b8:58:39:0b:0e:32:c2:73:f0:bb:72:04: a0:6e:fd:a0:60:1f:06:ee:37:52:57:8f:ff:96:92: 7e:b9:9a:a8:d5:f5:a9:35:f9:c2:b4:d8:42:f8:60: a8:85:ec:7e:0a:ad:4f:d9:84:5e:04:17:99:4c:63: 56:c6:cb:0f:21:94:82:1e:29:a7:cb:90:5b:32:5e: 0e:d6:36:18:12:03:b6:63:e0:48:5f:bd:ad:37:86: a1:80:3a:4b:aa:93:6b:30:0e:b7:82:a9:97:b7:94: 0b:46:3f:eb:a7:09:ec:dc:f4:7b:43:92:8f:2d:83: e5:eb:af:e3:2b:db:03:e1:91:0a:07:2b:06:e6:33: bb:97:70:c0:a6:7a:ac:01:49:c5:1d:74:17:9d:10: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:35:7B:D0:C5:50:D0:1D:59:DA:94:2F:ED:A3:AA:30:BF:AC:DA X509v3 Authority Key Identifier: keyid:66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bd:07:1f:20:2c:9e:b3:72:64:e6:c2:22:21:c9:cb:fb:6a: 57:c3:cf:07:8e:35:a2:5c:d8:19:1d:4a:fb:69:ea:75:a2:3f: a1:b4:7f:04:3f:b7:29:9f:5d:a7:37:97:1e:5a:79:2d:17:06: c2:f4:7b:c1:02:df:bb:56:a9:a0:78:b9:98:2c:3f:a9:c2:12: 75:98:37:c0:e3:21:90:33:1d:7e:7f:bb:0c:4a:5b:7a:16:db: d0:5f:ab:ad:9a:3f:59:6f:0b:14:4f:e9:cf:52:f7:1f:63:e0: f6:0e:fd:fa:3f:92:3f:b5:2d:31:71:c6:9b:eb:d2:59:47:a5: 4b:53:bc:4d:a9:d9:ff:04:89:ae:d1:65:2a:25:bc:4c:9a:5f: d3:f7:aa:07:7b:62:0c:0b:74:07:de:2e:12:34:a0:18:f4:cb: 01:ee:c1:20:62:fb:0a:eb:e3:da:79:0b:0a:c8:c8:5e:da:97: 54:a6:07:e6:44:4e:c3:28:42:a9:cc:43:59:bb:f9:8c:19:4f: 32:e2:85:5a:70:22:49:5d:fc:c6:27:2b:2e:5a:16:76:c9:6b: 9a:22:de:d3:9d:ec:3e:1f:1c:cd:ae:0f:9d:64:b3:b8:49:fe: ee:18:3b:c6:94:e5:d2:ad:c8:00:e6:d2:a9:98:f8:31:52:3c: 53:6e:0a:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsAKN3oJV57dlx+tUHo8x5gETsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhDMUQ4 RTc2NDE2NjAeFw0yNjA0MTgwNzU2MTRaFw0yNjA0MjExMjU2MTRaMDMxMTAvBgNV BAMTKEQyMTMzNTdCRDBDNTUwRDAxRDU5REE5NDJGRURBM0FBMzBCRkFDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/5326eqOTkKPdp4g4l+LCyDO 8N2ds1yJH1q3ki7MYnpzQCLFX5erDFTBFeqFE3W5l3g7twp9WQSsIAPREQ+0OKc4 05uV01c4B2EhBS43occImn8RdHjYGtGFDGWxFyWtGjXvA/V0p3KbUrhYOQsOMsJz 8LtyBKBu/aBgHwbuN1JXj/+Wkn65mqjV9ak1+cK02EL4YKiF7H4KrU/ZhF4EF5lM Y1bGyw8hlIIeKafLkFsyXg7WNhgSA7Zj4Ehfva03hqGAOkuqk2swDreCqZe3lAtG P+unCezc9HtDko8tg+Xrr+Mr2wPhkQoHKwbmM7uXcMCmeqwBScUddBedEInfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hM1e9DFUNAdWdqUL+2jqjC/rNowHwYDVR0j BBgwFoAUZowjl4eRdv0A0aSUm6+MHY52QWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YmRlM2E0Mi02MjcyLTRiNmMtYWQ4MS1jY2NmYmU5NDg4YzAvMC82NjhDMjM5Nzg3 OTE3NkZEMDBEMUE0OTQ5QkFGOEMxRDhFNzY0MTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhDMUQ4RTc2 NDE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvNjY4QzIzOTc4NzkxNzZGRDAwRDFBNDk0OUJBRjhD MUQ4RTc2NDE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA29Bx8gLJ6zcmTmwiIhycv7alfDzweONaJc 2BkdSvtp6nWiP6G0fwQ/tymfXac3lx5aeS0XBsL0e8EC37tWqaB4uZgsP6nCEnWY N8DjIZAzHX5/uwxKW3oW29Bfq62aP1lvCxRP6c9S9x9j4PYO/fo/kj+1LTFxxpvr 0llHpUtTvE2p2f8Eia7RZSolvEyaX9P3qgd7YgwLdAfeLhI0oBj0ywHuwSBi+wrr 49p5CwrIyF7al1SmB+ZETsMoQqnMQ1m7+YwZTzLihVpwIkld/MYnKy5aFnbJa5oi 3tOd7D4fHM2uD51ks7hJ/u4YO8aU5dKtyADm0qmY+DFSPFNuCu0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:38 2026 by rpki-client